CVE-2012-5483 tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local...
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenStack Keystone | = 2012.1.3 | No fix listed |
References
- FEDORA-2012-19341 vendor-advisory
- RHSA-2012:1556 vendor-advisory
- 56888 vdb-entry
- bugzilla.redhat.com
- keystone-secret-key-info-disc(80612) vdb-entry
- Debian Security Tracker CVE-2012-5483 vendor-advisory